CVE-2020-7782: Spritesheet-Js Project Spritesheet-Js

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/generator.js, which is triggered by main entry of the package.

Affected products

Published 2021-02-08. Last modified 2026-06-17.